IntrusionOnline.us
Title
Intrusion Detection and Prevention Applications and Appliances and network security
Description
Excerpted from the website:
- Animated Cursor Vulnerability
- A vulnerability in the handling of animated cursor files (.ani) has led to active exploit code circulating. This exploit code can allow a remote attacker to download and execute arbitrary code on impacted systems, running that code in the context of the logged in user. The exploit code can be delivered via malicious websites or by email. Microsoft has released a Security Advisory (935423) which discusses the vulnerability, but that advisory currently provides no real workaround to protect against exploit. In response, eEye Digital has released a free patch to serve as interim protection until Microsoft releases a patch of their own. According to eEye Digital:
